$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: JcgFHbY9whXOrGuGbsURVO7yIZFsvD6TzTC2wnLGn8w= Subject key identifier: 75:A2:C9:D7:FE:62:E1:F8:E3:E7:F7:0C:D6:E7:64:9B:6F:14:5E:89 Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 0DA77C974A72035883B1E123C9A5C84852F34E0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:48:01 +0000 Manifest this update: Mon 20 Jul 2026 21:43:01 +0000 Manifest next update: Tue 21 Jul 2026 23:26:01 +0000 Files and hashes: 1: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) 2: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: bUThd2jg4JqILTBEQ8malPzJQMgssTAPip3m3vW0pyA=) 3: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 4: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 5: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a7:7c:97:4a:72:03:58:83:b1:e1:23:c9:a5:c8:48:52:f3:4e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Jul 20 21:43:01 2026 GMT Not After : Jul 21 23:26:01 2026 GMT Subject: CN=75A2C9D7FE62E1F8E3E7F70CD6E7649B6F145E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:b1:13:a3:e4:61:58:4a:4f:9a:7a:70:af: 33:2f:2f:ad:cb:5a:3c:8c:32:da:14:34:6a:7b:b3: b2:b6:05:f1:3d:e0:a7:0a:2d:bd:24:90:c9:65:c5: e2:47:33:11:6f:77:77:be:a3:65:ed:13:3a:2b:3d: f2:b1:ce:a1:9b:b1:6a:26:b1:e7:71:3a:5d:84:d6: d9:19:a0:ef:3f:cf:1c:76:3c:7e:77:1f:0b:b7:0b: ef:8a:01:bb:eb:d3:3c:ad:01:99:7f:85:df:86:df: d8:85:49:e7:05:2c:60:d7:c4:be:32:6e:4f:34:3a: 41:74:53:de:13:ec:45:82:9a:4a:05:bd:b5:95:39: 81:42:8e:73:63:09:ca:70:92:ab:28:4d:db:09:cc: 3a:2b:97:39:5f:56:7f:45:d8:b5:67:75:f1:26:84: 5f:6f:69:a1:87:d6:bc:8a:91:de:a5:65:c3:ba:a4: 5e:82:2b:cf:a1:12:21:64:7c:b3:55:41:5a:e0:da: 43:68:c1:83:3f:1a:fa:a3:ea:98:26:ef:54:40:27: f8:a7:3e:a0:c7:0d:5a:79:be:eb:82:31:d7:98:6b: c1:1a:4c:41:91:05:44:c7:c6:00:05:f5:cc:57:69: 6d:fa:84:b1:29:e7:81:7e:fb:59:a2:2b:a7:3b:e5: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A2:C9:D7:FE:62:E1:F8:E3:E7:F7:0C:D6:E7:64:9B:6F:14:5E:89 X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0e:5d:d4:07:af:3b:32:85:5a:f0:01:e8:73:e9:78:99:d7: a2:c8:21:ba:4d:ba:fb:ac:eb:78:a2:1e:fc:6e:3a:1a:5d:78: ba:b5:93:51:52:33:42:a5:e6:c5:90:04:07:cf:0f:d9:af:50: 81:7e:64:de:2a:65:2c:ab:7b:1f:0a:6c:d5:bc:67:9f:21:b7: 93:29:80:bd:c9:3f:c5:a0:27:29:51:be:a4:db:62:a3:92:a1: 2b:2c:ff:7a:a7:8d:89:15:bd:2e:07:31:23:8e:73:8a:a4:a8: 2f:bc:e4:2e:51:cc:4c:02:20:10:a9:71:07:14:7c:00:08:00: 19:4b:c9:97:4b:f4:e4:60:9b:c9:93:8b:94:24:68:f0:77:dd: e2:20:c0:29:16:6c:1a:ed:9c:85:34:6d:22:d1:ce:9f:66:07: 77:a4:4b:f8:23:a3:d9:53:30:4b:3d:93:a5:65:54:33:0f:f9: b6:e8:96:34:00:3d:43:be:5b:8c:c5:9f:b2:b9:5c:be:0b:0c: 6a:da:07:b7:d0:f7:40:91:a8:ca:d8:45:36:c5:67:d7:41:77: 85:8f:bb:71:0f:d6:30:de:6b:18:39:ae:f5:6d:49:4e:4a:be: 4f:9e:1e:f1:a0:63:b7:b6:45:5c:5b:cf:13:95:5e:a5:c5:d4: 49:1f:c5:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDad8l0pyA1iDseEjyaXISFLzTg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA3MjAyMTQzMDFaFw0yNjA3MjEyMzI2MDFaMDMxMTAvBgNV BAMTKDc1QTJDOUQ3RkU2MkUxRjhFM0U3RjcwQ0Q2RTc2NDlCNkYxNDVFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVLETo+RhWEpPmnpwrzMvL63L WjyMMtoUNGp7s7K2BfE94KcKLb0kkMllxeJHMxFvd3e+o2XtEzorPfKxzqGbsWom sedxOl2E1tkZoO8/zxx2PH53Hwu3C++KAbvr0zytAZl/hd+G39iFSecFLGDXxL4y bk80OkF0U94T7EWCmkoFvbWVOYFCjnNjCcpwkqsoTdsJzDorlzlfVn9F2LVndfEm hF9vaaGH1ryKkd6lZcO6pF6CK8+hEiFkfLNVQVrg2kNowYM/Gvqj6pgm71RAJ/in PqDHDVp5vuuCMdeYa8EaTEGRBUTHxgAF9cxXaW36hLEp54F++1miK6c75Vt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdaLJ1/5i4fjj5/cM1udkm28UXokwHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcOXdQHrzsyhVrwAehz6XiZ16LIIbpNuvus 63iiHvxuOhpdeLq1k1FSM0Kl5sWQBAfPD9mvUIF+ZN4qZSyrex8KbNW8Z58ht5Mp gL3JP8WgJylRvqTbYqOSoSss/3qnjYkVvS4HMSOOc4qkqC+85C5RzEwCIBCpcQcU fAAIABlLyZdL9ORgm8mTi5QkaPB33eIgwCkWbBrtnIU0bSLRzp9mB3ekS/gjo9lT MEs9k6VlVDMP+bboljQAPUO+W4zFn7K5XL4LDGraB7fQ90CRqMrYRTbFZ9dBd4WP u3EP1jDeaxg5rvVtSU5Kvk+eHvGgY7e2RVxbzxOVXqXF1EkfxYw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:11:40 2026 by rpki-client